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[Mleans for Solving the Problem] 

Fig. 1 shows a block diagram showing the principle of the 
present invention. In the drawing, numeral 1 denotes a first 
random number generator; numeral 2 denotes a second random 
number generator; numeral 3 denotes a decoder which selects any 
one of W buffers; and numerals4-l to 4-W denote buffers which 
store and output each value of the second series of random number 
sequence in accordance with the instructions from the decoder 
3. 

[Operation] 

In Fig. 1, assuming that the second series of random number 
sequence are q-valued random numbers, random transposition 
which randomly distributes W buffers 4-1 to 4-W is considered. 
The number of types of transposition at this time is as follows. 

Specifically, when random transposition of q-valued 
random numbers is performed at the average width W, the number 
of types of transposition is W!. At this time, because 
information carried by a q-valued W-digit number is q"*, it is 
found that transposition rule cannot be uniquely determined 
from the obtained, random numbers if W!> q"*. When logarithm is 
applied to the above inequality, 

W log q < log W! ^ W log W/e 
is obtained. Therefore, if W > q*e, the above inequality is 
satisfied. In other words, even if the random number generating 
algorithm is known, it is not possible to determine, from the 
obtained random numbers, which part of the random number series 
is used. This makes a random number unable to be analyzed. 

(Embodiment) 

Fig. 2 shows one embodiment of- the present invention. In 
Fig. 2, numerals 1, 2, 3 and 4 correspond to those in Fig. 1, 
and numerals 5 and 6 denote AND circuits, respectively and 
numeral 7 denotes an OR circuit. 
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The shown structure represents the case of q=2, in which 
W > 2*2.7 is obtained from the above description and therefore 
W=8 is considered. In the drawing, one of eight buffers 4-1 
to 4-8, for example, is selected by the output from the random 
number generator 1, and the output from the random number 
generator 2 is set to the selected buffer and simultaneously 
the value of the buffer is output. 

It is possible to prevent the problems occurring at the 
initial stage by filling the eight buffers with random numbers 
at the start point or by discarding the certain number of output 
random numbers which are first generated. 

• In the case of the shown embodiment, 3-bit information 
is discarded in order to obtain 1-bit output, and the discarded 
information cannot be reproduced from the obtained information. 
However, in practical use, it is sufficient to have four buffers. 
Further, it is also possible to eliminate one of the shown random 
number generators and to alternately extract an output from a 
single random number generator, for example, for generating 
first and second series of random sequences. 
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